md5-hex

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project has a narrower visible backing base. This is partly offset by the matching repository and consistent package ownership.

Release historycaution

The package has 12 releases over more than 11 years but none in the last 12 months; the latest release was in October 2023. This indicates a long maintenance gap, though the mature, stable package may need few changes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the package is mature and the repository is not archived.

Repo toolingcaution

The repository uses build tools, but no security scanning tools were detected. For this small package this is a modest transparency gap rather than a severe adoption barrier.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, both action references are unpinned, leaving the workflow dependent on mutable action versions.